Copyright 2011 Oracle ,d/or it affiliates. All rights reserved. Authors Disclaimer Michael Ernest Gary Riseborough This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your Marcus Flieri own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes \"fair use\" under copyright law, you Bart Smaalders may not use, share, download, upload, copy, print, display, perform, reproduce, Dave Miner publish, license, post, transmit, or distribute this document in whole or in part without Nicolas Droux the express authorization of Oracle. Dan Price The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, Cindy Swearingen 500 Oracle Parkway, Redwood Shores, California 94065 USA. This document is not Glenn Fadden warranted to be error-free. Liane Praza Restricted Rights Notice If this documentation is delivered to the United States Government or anyone using Technical Contributors the documentation on behalf of the United States Government, the following notice is and Reviewers applicable: Mike Tracey U.S. GOVERNMENT RIGHTS Mike Carew The U.S. Governments rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Editor Trademark Notice Malavika Jinka Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. Publishers Nita Brozowski Sumesh Koshy Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT Contents Preface 1 Introduction Oracle Solaris: The Mission Critical OS 1-2 Raising the Bar Set by Solaris 10 1-3 SPARC Enterprise Servers 1-4 SPARC T3 Servers: Scaling to New Heights 1-5 Oracle Solaris: Platform Choice and Flexibility 1-6 Serious About Oracle Solaris 1-7 Oracle Addresses Range of Customer Needs 1-8 Topic Outline 1-10 Module Structure 1-11 2 Image Packaging System (IPS) and Automated Installer (AI) IPS Design Goals 2-2 IPS Implementation 2-3 IPS Package 2-4 Package Naming 2-5 IPS Repository 2-6 Starting the packagemanager GUI 2-7 Starting the packagemanager GUI - 2 2-8 pkg Subcommands 2-9 pkg Subcommands 2 2-10 Example: Search, List, and Install 2-11 Installing a Package with Dependencies 2-12 Verifying a Package 2-13 Fixing a Package 2-14 Oracle University and ORACLE CORPORATION use only Listing Package Contents 2-15 Removing a Package 2-16 Updating a Package 2-17 Creating a Package 2-18 Group Packages 2-19 Other Commands and Utilities 2-20 AI: Why Replace JumpStart? 2-21 Rosetta Stone for Solaris 10 Users 2-22 AI Components and Features 2-23 AI Terminology 2-24 iii THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Flow of Automated Installation 2-25 Creating an AI Service 2-26 Creating an IPS Repository 2-28 Creating AI Clients 2-29 JumpStart to AI Mapping 2-30 IPS References 2-31 AI References 2-32 3 Network Virtualization 1 Feature: Overview 3-2 Virtual NICs (VNICs) 3-3 Virtual NICs (VNICs) 2 3-4 Virtual Switches 3-5 Physical Wire, Physical Machines 3-6 Virtual Network: Example 3-7 Creating VNICs and Etherstubs 3-8 Unified Data Link Properties 3-9 Virtual Bridges 3-10 ipadm 3-11 Managing Interfaces and IP Addresses 3-12 Managing Interface Properties 3-13 Creating Flows 3-14 Data Link Vanity Naming 3-15 Resource Pools 3-16 dlstat(1M) 3-17 Other Network Observability Enhancements 3-18 Rethinking Zones 3-19 Other Solaris 11 Enhancements 3-20 4 ZFS Features in Solaris 11 Oracle University and ORACLE CORPORATION use only Enhancements 4-2 Boot Environments 4-3 Boot Environments (BE) 4-4 Creating a Boot Environment 4-5 Activating a Boot Environment 4-6 Destroying a Boot Environment 4-7 Mounting and Unmounting a Boot Environment 4-8 Creating New Boot Environments 4-9 Creating New Boot Environments - 2 4-10 BE Upgrade with pkg-update 4-11 Deduplication 4-12 iv THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Deduplication Example - 1 4-13 Deduplication Example - 2 4-14 Root Pool Mirroring 4-15 Snapshot Differences 4-16 zfs diff Output 4-17 Send Stream Enhancements 4-18 Send Stream: Override Example 4-19 Send Stream: Enforce Example 4-20 Send Stream: Ignore Example 4-21 Pool Import: Log Device Recovery 4-22 Pool Import Recovery: Example 4-23 Pool Import: Read-Only Mode 4-24 Synchronous Write Behavior Property 4-25 Values for sync Property 4-26 ZFS Synchronous Behavior: Tuning Caveats 4-27 RAIDZ/Mirror Performance 4-28 Integrating ZFS into Deployment 4-29 Performance Notes 4-30 Other ZFS Features 4-31 ZFS References 4-32 5 Zones Changes Since Solaris 10 FCS 5-2 Design and Features 5-7 Storage 5-8 Networking: Exclusive IP Zones 5-9 Networking: Shared IP Zones IPMP 5-11 Zones Observability 5-12 zonestat Command 5-13 zonestat Interval: Example 5-14 Oracle University and ORACLE CORPORATION use only zonestat by Resource: Example 5-15 Resource Management 5-16 Zones Security 5-17 Solaris 10 Containers 5-18 Solaris 10 Container: Expected Migration Path 5-19 References 5-20 6 Network Virtualization 2 Advanced Network Features 6-2 ilbadm: L3/L4 Integrated Load Balancing 6-3 Load Balancing Components 6-4 v THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED ilbadm: Example 6-5 IP Filter, Forwarding in a Zone 6-6 Hardware Lanes and Dynamic Polling 6-7 Hardware Lanes 6-8 ipmpstat: Observability for IPMP Groups 6-9 ipmpstat: Example 6-10 Fiber Channel over Ethernet (FCoE) 6-11 Virtual Router Redundancy Protocol (VRRP) 6-12 IP over Infiniband (IPoIB) 6-13 Non-Uniform Memory Architecture (NUMA) I/O 6-14 NUMA I/O Architecture: Overview 6-15 GLDv3 Public Driver APIs 6-16 Network Performance Highlights 6-17 7 Security Features 7-2 Root Implemented as a Role 7-3 File system encryption: zfs(1M) 7-4 Configuring ZFS Encryption 7-5 File system encryption: lofiadm 7-6 Network Spoofing Protection 7-7 Zones: Delegated Administration 7-8 SMF: Delegated Administration 7-9 SMF: Method Context 7-10 SMF: Firewall Integration 7-11 Least Privilege Changes 7-12 In kernel pfexec 7 - -13 Basic Privileges: More is Less 7-14 Role-Based Access Control 7-15 Sandboxing Enhancements 7-16 Oracle University and ORACLE CORPORATION use only Kerberos Improvements 7-17 Key Management: pkcs11_kms Provider 7-18 Other Enhancements 7-19 Oracle Solaris 11 Trusted Extensions 7-20 Trusted Extensions Changes 7-21 Trusted Platform Modules (TPM) 7-22 8 Services Management Facility (SMF) SMF Design Goals 8-2 SMF Is the Glue in Solaris 11 8-3 Service Templates 8-4 vi THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Early Manifest Imports 8-5 SMF Enhanced Profiles 8-6 Fault Notification 8-7 IPS Actuators 8-8 FMRI Stored in proc_t Structure 8-9 Oracle University and ORACLE CORPORATION use only vii THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Preface Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Profile Before You Begin This Course You should be able to configure and manage a system running the Oracle Solaris Operating system. How This Course Is Organized An understanding of Oracle Solaris features and working knowledge of the Oracle Solaris 10 Operating System is beneficial, but not required How This Course Is Organized S What's New in Oracle Solaris 11 is an instructor-led seminar featuring lecture and demonstrations. Online demonstrations and written practice sessions reinforce the concepts and skills introduced. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Related Publications System release bulletins Installation and users guides read.me files International Oracle Users Group (IOUG) articles Oracle Magazine Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Introduction Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle Solaris: The Mission Critical OS If It Must Work, It Runs on Solaris The #1 deployment platform for the #1 mission critical Oracle Database Extreme data integrity : ZFS Hardened security: Secure by Default, Cryptographic Framework, Least Privilege model Predictive Self Healing FMA, SMF Complete Virtualization with application isolation and resource management: Containers Production Safe Observability: DTrace Scalable to thousands of threads, terabytes of memory Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use onlyeKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Raising the Bar Set by Solaris 10 Oracle Solaris 11 The Only Completely Virtualized OS Availabilit : Greatly improved with new packaging tools, safe online upgrades, faster reboots Scalability and Performance : Thousands of threads, terabytes of RAM, hundreds of Gbps network bandwidth Efficienc : Virtualized network, storage and server resources; binary compatibility; advanced power management Securit : On-disk data encryption, secure process execution, HW certification of the OS at boot time Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 1 - 3 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED SPARC Enterprise Servers The Leader in System Scalability 5 Year Trajectory Cores 4x Threads 32x Memory Capacity 16x SPARC Database TPM 40x 1-64 Sockets Java Ops Per Second 10x +2x Throughput +1.5x Single M-Series Strand 8-64 Sockets +2x T-Series Throughput 1-8 Sockets M-Series +3x Throughput 8-64 Sockets +6x Throughput T-Series +1.5x Single 1-4 Sockets Strand M-Series +3x Single Strand T-Series 1-64 Socket 1-4 Socket + 20% + 2x Throughput Solaris 11 Solaris 11 Solaris 11 Solaris 11 Solaris 11 Express Update Update Update 2010 2011 2012 2013 2014 2015 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED SPARC T3 Servers: Scaling to New Heights Integrated, High Throughput SPARC Systems for Massive Scale SPARC T3-4 Worlds First 16 HIGH Core Processor 64 cores SPARC T3-2 512 threads Best scale SPARC T3-1 32 cores Most security 256 threads SPARC T3-1B Blade 16 cores Medium scale Enterprise- for Blade 6000 ready 128 threads Middleware consolidation 16 cores Entry-level Price/performa Enterprise- 128 threads ready SYSTEM THROUGHPUT nce Best density Best RAS CONSOLIDATION HIGH VIRTUALIZATION HIGH Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle Solaris: Platform Choice and Flexibility Solaris Solaris Solaris Solaris 10 Zone 8 or 9 Zone Zone* Zone* Oracle SPARC x86 Oracle x86 Built-in scalable, platform- Consolidation path for older Solaris independent virtualization versions Native, bare metal performance Leverages server virtualization technology Binary Compatibility Guaranteed Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Serious About Oracle Solaris Investments in Oracle Solaris 11 SPARC, x86 support Exadata and Exalogic Compute, Storage, Network Over 2,700 projects, over 400 inventions Over 20 million hours of development Over 60 million hours of testing Over 56 million tests Over 11,000 applications Solaris 11: Coming in 2011 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 1 - 7 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle Addresses Range of Customer Needs High Performing Application-to-Disk Solutions from a Single Vendor Engineered Systems Oracles Optimized HIGH Solutions Applications Fusion Middleware Efficiency Database VM Solaris/OEL Compute, Storage, Network, Server Software Storage Manageability and Simplicity HIGH Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracles products remain at the sole discretion of Oracle. Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 1 - 9 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Topic Outline Morning Image Packaging System Automated Installer Networking (Crossbow) Afternoon Solaris Containers ZFS Security SMF (Application Deployment) Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 1 - 10 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Module Structure Focus on enhancements since Oracle Solaris 10 9/10 release Command-line examples included with slides Feature demonstrations at instructor's discretion Use cases blogged daily Demo environment is generic VirtualBox instance Unless special arrangements are made Text install, slim_profile added Demo scripts available to those interested Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 1 - 11 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Image Packaging System (IPS) and Automated Installer (AI) Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED IPS Design Goals Use one process for installing, patching, and upgrading Minimize system downtime Reverse install operations easily Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 2 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED IPS Implementation Relies on ZFS for safety Makes fast, safe copies with snapshots and clones Can apply changes to cloned BEs when desired Avoids conditions imposed by patches that overwrite files Single-user mode to prevent untimely access Deferred activation to prevent uncoordinated access Problem: A file that has been patched is available immediately for use. A program that depends on it, however, will not work until the system is rebooted. http://blogs.oracle.com/patch/entry/deferred_activation_patching Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 3 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED IPS Package New model incorporates all software change types Includes dependencies automatically Installs only what is required to complete a package Each package is associated with a publisher Replaces metacluster model with profiles that can overlap Supports signed packages Uses a f package model All variations in one: SPARC/x86/debug/nondebug Available from a repository Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 4 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Package Naming Packages use a Fault Management Resource Identifier (FMRI) pkg://solaris/library/libc@5.11,5.11- 0.75:20071001T163427Z Package categories establish a namespace Similar to SMF service names Each version has its own tuple libc@5.11,5.11-0.75:20071001T163427Z < component >,< bui >-< branch >:< time stamp > Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 5 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED IPS Repository Networked software catalog service Incremental or monolithic downloads Built-in software release versioning Avoids media size as a delivery constraint Publishes catalog of available software Automates retrieval of new dependencies, updates Download/unzip/install steps unnecessary Default publisher http://pkg.oracle.com/solaris/release/ Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 6 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Starting the ackagemanager GUI or pkg Subcommands /usr/bin/pkg pkg list List packages installed on the system pkg search < pkg_name|pattern > Identify the package that a file (or pattern) belongs to Install packages and configure repositories Limit search to local packages with -l option pkg info < pkg_name > Lists package details Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 9 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED pkg Subcommands 2 pkg install pkg uninstall pkg verify Validate a packages installation pkg fix Fix errors reported by pkg verify pkg contents Display the objects making up a package Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 10 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Example: Search, List, and Install # pkg search /usr/bin/ncftp INDEX ACTION VALUE PACKAGE path file usr/bin/ncftp pkg:/network/ftp/ncftp@3.2.3-0.151.0.1 # pkg list pkg:/network/ftp/ncftp pkg list: no packages matching 'pkg:/network/ftp/ncftp' installed # pkg install ncftp Packages to install: 1 Create boot environment: No DOWNLOAD PKGS FILES XFER (MB) Completed 1/1 13/13 0.5/0.5 PHASE ACTIONS Install Phase 39/39 PHASE ITEMS Package State Update Phase 1/1 Image State Update Phase 2/2 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Installing a Package with Dependencies # pkg install gimp Refreshing catalog 1/1 solaris Caching catalogs ... Creating Plan Packages to install: 24 Create boot environment: No Services to restart: 6 DOWNLOAD PKGS FILES XFER (MB) library/desktop/libgweather 0/24 0/8732 0.0/68.0 ... image/library/gegl 23/24 8714/8732 68.0/68.0 Completed 24/24 8732/8732 68.0/68.0 PHASE ACTIONS Install Phase 1/10557 ... Install Phase 10557/10557 PHASE ITEMS Package State Update Phase 1/24 ... Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Verifying a Package # pkg verify ncftp # ls -l /usr/bin/ncftp -r-xr-xr-x 1 root bin 276012 Dec 7 20:39 /usr/bin/ncftp # chmod 775 /usr/bin/ncftp # pkg verify ncftp Verifying: PACKAGE STATUS pkg://solaris/network/ftp/ncftp ERROR file: usr/bin/ncftp Mode: 0775 should be 0555 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Fixing a Package # pkg fix ncftp Verifying: pkg://solaris/network/ftp/ncftp ERROR file: usr/bin/ncftp Mode: 0775 should be 0555 Created ZFS snapshot: 2010-12-07-23:29:09 Repairing: pkg://solaris/network/ftp/ncftp DOWNLOAD PKGS FILES XFER (MB) Completed 1/1 2/2 0.1/0.1 PHASE ACTIONS Update Phase 2/2 PHASE ITEMS Package State Update Phase 1/1 Package Cache Update Phase 1/1 Image State Update Phase 2/2 # pkg verify ncftp Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Listing Package Contents # pkg contents ncftp PATH usr usr/bin usr/bin/ncftp usr/bin/ncftpbatch usr/bin/ncftpbookmarks usr/bin/ncftpget usr/bin/ncftpls usr/bin/ncftpput usr/bin/ncftpspooler usr/sfw usr/sfw/bin usr/sfw/bin/ncftp ... Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Removing a Package # pkg uninstall ncftp Creating Plan Packages to remove: 1 Create boot environment: No PHASE ACTIONS Removal Phase 1/33 Removal Phase 33/33 PHASE ITEMS Package State Update Phase 1/1 Package State Update Phase 1/1 Package Cache Update Phase 1/1 Image State Update Phase 1/2 Image State Update Phase 2/2 Image State Update Phase 2/2 PHASE ITEMS Reading Existing Index 1/8 Reading Existing Index 5/8 Reading Existing Index 8/8 Indexing Packages 1/1 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Updating a Package Updating all installed packages to the latest version # pkg update Packages to install: 1 Packages to update: 795 Create boot environment: Yes DOWNLOAD PKGS FILES XFER (MB) Completed 796/796 4754/4754 205.2/205.2 PHASE ACTIONS Removal Phase 2561/2561 Install Phase 3967/3967 Update Phase 6277/6277 ... A clone of solaris-39 exists and has been updated and activated. On the next boot the Boot Environment solaris-40 will be mounted on '/'. Reboot when ready to switch to this updated BE. Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating a Package Easy to package existing software $ pkgrepo -s file:/tmp/test-repo create $ pkgrepo -s file:/tmp/test-repo set publisher/prefix=michael.oow.com $ eval `pkgsend -s file:/tmp/test-repo open ilb_demo@1.0` < exports a PKG_TRANS_ID value into shell environment > pkgsend -s file:/tmp/test-repo import ~/ilb_demo $ $ pkgsend -s file:/tmp/test-repo close pkg://michael.oow.com/ilb_demo@1.0,5.11:20110912T012101Z PUBLISHED Or emit a manifest $ pkgsend generate ~/fu file gnome_terminal_fu group=bin mode=0644 owner=root path=gnome_terminal_fu pkg.size=326 file netbeans_fu group=bin mode=0644 owner=root path=netbeans_fu pkg.size=283 file awk_fu group=bin mode=0644 owner=root path=awk_fu pkg.size=110 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Group Packages Part of manual or automated install process Controls other installed packages (or package groups) babel_install installs lim_install slim_install is LiveCD content Must uninstall group packages to customize what they control Remove babel_install to manage slim_install Remove slim_install to manage individual packages The automated installer will do this for you Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 19 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Other Commands and Utilities Other pkg(5) utilities pkg publisher pkg set-publisher pkgrepo(1) pkgsend(1) pkgrecv(1) pkgdepend(1) pkg.depotd(1M) pkgmogrify(1M) Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 20 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED AI: Why Replace JumpStart? To make updating/patching: Faster More reliable Easily reversible To leverage current technology Integrate with ZFS Leverage the IPS repository Apply SMF naming scheme To separate client and server dependencies Make the installer platform-neutral Let clients select their software repository Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 21 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Rosetta Stone for Solaris 10 Users Solaris 10 Solaris 11 SVR4 Packages IPS (SVR4 still supported) Install media Starter image + IPS repository beadm(1M) Live Upgrade Upgrade option pkg update , Update Manager JumpStart Automated Installer(AI) JumpStart Profiles AI Manifests Flash Install replication No equivalent yet Blueprints for custom DVDs Distribution Constructor Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED AI Components and Features Three service components DHCP server (requires mDNS) SMF-based installer IPS repository Tools for managing and observing process installadm(1M) Configure with Observe clients using livessh install parameter Manage image with beadm(1M) AI is WAN Boot-ready Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 23 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED AI Terminology Client (installation target) Can be physical or virtual (not zones, yet) SMF Services svc:/network/dhcp-server:default svc:/system/install/server:default svc:/application/pkg/server Manifest SMF-named install configuration Criteria Properties that match client details to an appropriate manifest Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 24 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Flow of Automated Installation Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 25 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating an AI Service Use Oracle Solaris DHCP or ISC DHCP installadm(1M) will manage DHCP if: svc:/network/physical:default (Not nwam ) svc:/network/dns/multicast:default /etc/netmasks entry exists Default route is set Use AI-specific image sol-11-exp-201011-ai-{x86|sparc}.iso Server and client platforms do not have to match Cannot super-size the AI image from Text or LiveCD Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 26 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating an AI Service # pkg verify installadm # installadm create-service -a sparc -n solaris_11 \ > -i 192.168.1.10 -c 3 -s ai_sparc_image.iso \ > /export/ai/sparc/solaris_11 # installadm list -n name > Install service name -i IP> DHCP start address -c count > DHCP range -s fil .iso> AI source image target_directory > Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 27 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating an IPS Repository Download Repository Image (two files) http://www.oracle.com/technetwork/server- storage/solaris11/downloads/index.html Combine the files and: Burn it to media Or, mount it by using lofiadm(1M) Or, copy it to a ZFS file system with rsync(1) Enable repository service svc:/application/pkg/server:default For more details, see How to Copy An Oracle Solaris 11 Software Package Repository. Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 28 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating AI Clients The client will get AI service location from DHCP. The client will get boot image, configuration, and repository location from AI service. AI service identifies clients by MAC address. x86 clients can add other boot parameters. AI service binds clients to a named install service. # installadm create-client -b \"console=ttya,livessh=enable\" \ > -e 0:e0:81:5d:bf:e0 -n s11-x86 # installadm create-client -e 00:14:4f:a7:65:70 -n s11-sparc Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 29 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED JumpStart to AI Mapping JumpStart AI setup_install_server installadm create-service add_install_client installadm create-client Manifests, driver updates, custom image begin script from Distribution Constructor Client profiles, rules Manifests with client criteria pkg actuators (before reboot) finish script First-boot SMF services sysidcfg file SMF profile Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED IPS References Adding and Updating Oracle Solaris 11 Software Packages http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=AUOSS Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 31 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED AI References Creating a Custom Oracle Solaris Installation Image http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=CCOSI Transitioning From Oracle Solaris 10 JumpStart to Oracle Solaris 11 Automated Installer http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=MFJAI Creating and Administering Oracle Solaris 11 Boot Environments http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=CMBEA Installing Oracle Solaris 11 Systems http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=IOSUI Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 2 - 32 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Network Virtualization 1 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Feature: Overview Virtualized NICs, switches, and bridges Dynamic IP address management Quality of Service (QoS) Control bandwidth by transport, service, protocol, or connection Vanity naming for devices Fencing compute resources Assign NICs/VNICs to processor sets or pools Real time usage and history Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only Virtual NICs (VNICs) Same control as a physical NIC Private TCP/IP stack ifconfig dladm Managed with , , and so on Dedicated MAC address May be random, chosen, or device-assigned Can be bound to hardware and kernel resources Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 3 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Virtual NICs (VNICs) 2 Private TCP/IP stack Data path is separate, does not rely on modules added to a global stack A complete, standards-based virtualization solution VLAN tags supported Priority Flow Control (PFC) With supporting hardware, can be fully encapsulated to the switch Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 4 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Virtual Switches VNICs sharing a VLAN id on one data link need a switch MAC layer provides built-in switching semantics Data path among VNICs sits on top of the data link Connects VNIC to physical network Isolates broadcast domains Want an explicit virtual switch? Use an etherstub : Makes any virtual network topology possible Can reduce or eliminate trips to physical NIC Can also manage resource controls Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 5 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Physical Wire, Physical Machines Client Router Host 1 Host 2 Port 6 Port 9 Port 3 Port 1 Port 2 20.0.03 20.0.01 10.0.03 10.0.01 10.0.02 1 Gbps 1 Gbps 1 Gbps 100 Mbps 1 Gbps Switch 3 Switch 1 Virtual Wire, Virtual Machines Virtual Client Router Host 1 Host 2 VNIC6 VNIC9 VNIC3 VNIC1 VNIC2 20.0.03 20.0.01 10.0.03 10.0.01 10.0.02 1 Gbps 1 Gbps 1 Gbps 100 Mbps 1 Gbps Etherstub 3 Etherstub 1 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Virtual Network: Example Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 7 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Creating VNICs and Etherstubs dladm create-vnic -l bge1 vnic1 # dladm create-vnic -l bge1 -m random p maxbw=100M -p cpus=4,5,6 vnic2 dladm create-etherstub vswitch1 # dladm show-etherstub LINK vnic2 bge1 random 2:5:6:7:8:9 max=100M 4,5,6 vnic3 vswitch1 random 4:3:4:7:0:1 max=1000M - # dladm create-vnic -l ixgbe0 -v 1055 -p maxbw=500M -p cpus=1,2 vnic9 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Unified Data Link Properties dladm [set,reset,show]-linkprop Alternative to ndd(1M) utility Single, stable interface for network property consumers Changes can be made temporary or persistent $ dladm show-linkprop e1000g0 LINK PROPERTY PERM VALUE DEFAULT POSSIBLE e1000g0 speed r- 1000 1000 -- e1000g0 duplex r- full full half,full e1000g0 state r- up up up,down e1000g0 flowctrl rw no bi no,tx,rx,bi e1000g0 maxbw rw -- -- -- e1000g0 priority rw high high low,medium,high e1000g0 protection rw -- -- mac-nospoof, restricted, ip-nospoof, dhcp-nospoof e1000g0 rxrings rw -- -- -- Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Virtual Bridges Data Link (Layer 2), 802.1D Detects MAC addresses VNIC VNIC VNIC Connects NICs, etherstubs, link aggregations Lets you move a VNIC Bridge without changing IP address Supports RBridges (TRILL Transparent etherstub Interconnect of Lots of Links) NIC NIC Manages with dladm Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 10 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED ipadm Consolidates management of Network interface state IP address assignment TCP/IP protocol properties Uses action-object subcommands like dladm create-if show-if disable-addr , , , and so on Supercedes various commands and files ifconfig /etc/hostname.< interface > ndd Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only What's New in Oracle Solaris 11 3 - 11 THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Managing Interfaces and IP Addresses # dladm create-vnic l bge0 play1 # ipadm create-addr T static d a 10.2.3.5/24 play1/v4static2 # ipadm show-if IFNAME STATE CURRENT PERSISTENT lo0 ok -m-v------46 --- bge0 ok bm--------46 --- play1 down bm--------46 -46 # ipadm show-addr ADDROBJ TYPE STATE ADDR play1/v4static2 static down 10.2.3.5/24 # # ipadm up-addr play1/v4static2 # ipadm show-addr play1/v4static2 ADDROBJ TYPE STATE ADDR play1/v4static2 static ok 10.2.3.5/24 Copyright 2011, Oracle and/or its affiliates. All rights reserved. Oracle University and ORACLE CORPORATION use only THESE eKIT MATERIALS ARE FOR YOUR USE IN THIS CLASSROOM ONLY. COPYING eKIT MATERIALS FROM THIS COMPUTER IS STRICTLY PROHIBITED Managing Interface Properties # ipadm show-ifprop play1 IFNAME PROPERTY PROTO PERM CURRENT PERSISTENT DEFAULT POSSIBLE play1 arp ipv4 rw on -- on on,off play1 forwarding ipv4 rw off -- off on,off play1 metric ipv4 rw 0 -- 0 -- play1 mtu ipv4 rw 1500 -- 1500 68-1500 play1 exchan